Independent assessment validates the operating effectiveness of VCA’s controls over an extended period, building on its SOC 2 Type 1 achievement.
Scottsdale, AZ – May 4, 2026 – VCA Software, a modern claims management platform built for the way claims actually work, today announced that it has successfully completed its SOC 2 Type 2 examination. The independent audit, conducted by Prescient Assurance, evaluated the design and operating effectiveness of VCA’s controls related to the AICPA Trust Services Criteria for Security and Confidentiality.
This SOC 2 Type 2 report builds on VCA’s prior SOC 2 Type 1 attestation, which confirmed that VCA’s system and controls were suitably designed to support its service commitments and system requirements for security and confidentiality. The new Type 2 examination extends that assurance by testing how those controls operated over time, providing additional confidence to customers and partners that VCA’s safeguards are not only well designed but consistently executed.
“Achieving SOC 2 Type 2 is a significant step forward in our security and compliance journey,” said John Varghese, CEO of VCA Software. “Our customers run mission‑critical claims operations on VCA, and they depend on us to protect sensitive data across multiple stakeholders, markets, and jurisdictions. This report demonstrates that our controls don’t just exist on paper—they work day in and day out.”
SOC 2 Type 2 is a rigorous standard established by the American Institute of Certified Public Accountants (AICPA) that assesses both the design and operating effectiveness of a service organization’s controls over a defined review period. For claims organizations, this level of assurance is increasingly essential as they modernize their technology ecosystems, coordinate with third parties, and navigate growing regulatory and client expectations around data protection.
“Security and reliability are baked into how we build and operate VCA,” said Ilda Cairns, Chief Product Officer at VCA Software. “From independent adjusters and TPAs to carriers and Lloyd’s markets, our clients can be confident that the workflows connecting their claims ecosystem are underpinned by robust, continuously validated controls.”
By achieving SOC 2 Type 2 compliance, VCA strengthens its position as a trusted partner for claims organizations seeking modern, secure, and compliant technology to manage the entire claims lifecycle.
VCA’s SOC 2 Type 2 condensed report is available under NDA upon request.
About VCA Software
VCA Software is a modern claims management platform purpose‑built for how claims actually work. VCA helps independent adjusters, TPAs, MGAs, carriers, municipal risk pools, and specialty markets run more effective claims operations with connected workflows, better oversight, and improved outcomes across the entire claims lifecycle. For more information, visit vcasoftware.com.
Media Contact:
Chastin Reynolds
Director of Marketing
VCA Software
